Code Repository Collection

ATT&CK T1213.003 covers collecting source code or embedded credentials from code repositories after access to the victim network or a private repository. This entry records a retired Bitbucket Cloud example: the Cloud API is Internet reachable, while private-repository access still requires valid repository read permission. The archived API request omitted Bitbucket's required workspace/repository path and used an undocumented `.dsv` suffix; the Git clone example embedded username and password in its URL, and its asserted clone audit event exceeded documented Bitbucket Cloud log coverage. No active collection steps remain; the prior procedure and its review history are preserved.